Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/jBTat3Jqx3D1ubOqE9TuJVezhj4.roa
File: jBTat3Jqx3D1ubOqE9TuJVezhj4.roa (raw, json)
Hash identifier: +WuqTh7VVwWszckQHYv+++bb3cGgIVci3OvsMGgrsKA=
Subject key identifier: 8C:14:DA:B7:72:6A:C7:70:F5:B9:B3:AA:13:D4:EE:25:57:B3:86:3E
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 0185708CAEEF681597A80C72C4E37AD8AABA
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/jBTat3Jqx3D1ubOqE9TuJVezhj4.roa
Signing time: Mon 02 Jan 2023 03:35:46 +0000
ROA not before: Mon 02 Jan 2023 03:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.76.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:ae:ef:68:15:97:a8:0c:72:c4:e3:7a:d8:aa:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Jan 2 03:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c14dab7726ac770f5b9b3aa13d4ee2557b3863e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5e:5e:98:ec:3f:9b:04:95:1a:e0:69:21:76:
25:a1:c1:2c:bb:d7:06:55:05:05:49:7f:14:c8:3f:
5e:1f:8c:6f:70:62:0f:7f:cd:ca:37:cf:5b:d0:1f:
30:63:42:32:bb:f0:aa:98:45:55:ee:2f:72:ce:35:
6e:6c:9e:22:48:c5:8e:46:41:7e:f5:24:94:58:75:
36:e4:5a:54:04:a6:5e:d0:c1:02:72:1c:bf:41:01:
d5:bf:1c:3b:f7:34:43:7c:0d:ae:8a:e0:c5:71:25:
da:e9:b4:c8:14:f5:fe:dc:48:2d:74:ec:14:77:b0:
0b:6d:c0:8b:43:29:05:ab:36:91:d5:e2:a6:45:ad:
9b:b1:8e:ad:56:74:9a:cb:79:77:1f:78:c3:45:02:
b7:ee:f0:1b:ae:90:7a:d4:f3:4e:cc:ec:43:37:44:
01:4d:9e:52:19:b5:72:04:46:c7:fa:c9:c9:7c:b1:
d0:0d:b2:25:43:b2:30:88:10:d3:14:ea:48:ab:5c:
33:3e:ce:5c:8b:22:14:00:44:d6:6f:38:a7:22:03:
15:01:b7:a2:ed:8f:90:31:b4:bd:8e:f2:60:85:63:
ed:9b:19:88:63:44:6b:eb:9e:4d:6b:77:38:11:3b:
2d:6a:ee:04:78:72:89:12:cb:73:f3:71:0d:8c:63:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:14:DA:B7:72:6A:C7:70:F5:B9:B3:AA:13:D4:EE:25:57:B3:86:3E
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/jBTat3Jqx3D1ubOqE9TuJVezhj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.41.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9f:30:99:61:03:47:68:26:0a:4e:65:93:cc:7c:75:4b:0e:
ca:76:a6:23:e5:9b:6f:18:50:63:66:c8:1a:3b:f2:11:12:8c:
3c:4e:9c:3c:ae:74:14:e1:6c:0a:cc:32:20:e8:c2:2e:7b:dd:
e8:3b:0e:b6:78:c0:78:7d:27:a0:50:90:33:d0:af:10:72:aa:
a2:1c:7c:10:e5:ad:f3:2b:5f:45:d1:ce:84:f5:be:a7:ff:51:
cf:c5:1b:93:aa:29:04:43:79:43:e8:f4:16:2a:22:50:b4:1c:
15:a1:88:8d:66:d2:7d:aa:29:21:e7:51:c1:f8:0f:a4:ff:db:
ab:6b:de:84:24:f6:5e:c2:c7:91:77:36:4b:9d:2e:93:e8:c8:
bd:b5:0f:84:c2:4b:0c:8f:a3:cc:41:16:54:74:62:b0:1d:02:
5d:22:c1:dc:27:cb:94:06:ae:4d:99:69:ff:19:4b:57:22:5f:
e1:8a:23:44:f2:de:d0:e4:e1:e9:90:b8:ee:dc:70:02:a5:4a:
91:79:64:b4:76:04:7a:4a:0f:fc:6a:9f:2b:a6:05:5c:a9:98:
40:15:6c:d1:45:78:3b:3d:73:b8:82:d7:5b:cc:ab:d8:d0:da:
0b:f1:51:f6:f3:e7:a2:51:49:4a:e4:03:99:de:0e:ba:0c:bf:
03:80:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org